HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 139671
Connection: keep-alive
Server: nginx
Date: Wed, 17 Jun 2020 18:18:06 GMT
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
Last-Modified: Wed, 17 Jun 2020 04:34:43 GMT
Strict-Transport-Security: max-age=15768000; includeSubDomains
Referrer-Policy: strict-origin
Content-Security-Policy: block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand-ar.com flightbookings.airnewzealand-br.com flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.cn.airnewzealand.com flightbookings.de.airnewzealand.com flightbookings.en.airnewzealand-ar.com flightbookings.en.airnewzealand-br.com flightbookings.en.airnewzealand.cn flightbookings.grabaseat.co.nz flightbookings.jp.airnewzealand.com auth.airnewzealand.co.nz; script-src 'self' s-airnz.com p-airnz.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com www.rnengage.com airnzukeu.custhelp.com airnzukeu.widget.custhelp.com flightbookings.airnewzealand.co.nz player.vimeo.com www.youtube.com s.ytimg.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com *.demdex.net www.google-analytics.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.googletagservices.com tpc.googlesyndication.com www.google.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com s.swiftypecdn.com upgrade.plusgrade.com nebula-cdn.kampyle.com screencapture.kampyle.com screencaptue-cdn.kampyle.com *.hotjar.com yourir.info analytics.twitter.com static.ads-twitter.com secure.quantserve.com rules.quantcount.com auth.airnewzealand.co.nz ssl.google-analytics.com cdnjs.cloudflare.com res.levexis.com; style-src 'unsafe-inline' s-airnz.com p-airnz.com fonts.googleapis.com airnzukeu.widget.custhelp.com tagmanager.google.com s.swiftypecdn.com upgrade-cdn-prd.plusgrade.com yourir.info 'self'; img-src https: data:; font-src s-airnz.com p-airnz.com fonts.googleapis.com fonts.gstatic.com dhm5hy2vn8l0l.cloudfront.net 'self'; media-src 'self' ; frame-src 'self' www.google.com nz.fltmaps.com player.vimeo.com www.youtube.com airnz.wufoo.com xd.wayin.com display.engagesciences.com *.demdex.net *.doubleclick.net www.googletagmanager.com tpc.googlesyndication.com *.cdn.optimizely.com nebula-cdn.kampyle.com *.hotjar.com; connect-src 'self' api.airnewzealand.co.nz api.airnz.io api.airnz.ai auth.airnewzealand.co.nz *.demdex.net *.tt.omtrdc.net www.google-analytics.com stats.g.doubleclick.net adservice.google.com pagead2.googlesyndication.com *.doubleclick.net *.optimizely.com s.swiftypecdn.com search-api.swiftype.com *.kampyle.com wss://*.hotjar.com https://*.hotjar.com vc.hotjar.io yourir.info ssl.google-analytics.com; object-src 'none'; frame-ancestors 'self'; report-uri /csp-report
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 586e6ea798d558df646a9c881dbc7e8c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW50-C1
X-Amz-Cf-Id: We8zhFTLk-eGkisGV_aOOef0_DSbDptmdlGoQphcwCFOwGfLhjqq0g==